Fortinet FortiNAC - Arbitrary File Write

Fortinet FortiNAC is susceptible to arbitrary file write. An external control of the file name or path can allow an attacker to execute unauthorized code or commands via specifically crafted HTTP request, thus making it possible to obtain sensitive information, modify data, and/or execute...

CVE-2026-73192: Improper Neutralization of Input During Web Page Generation

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability when using the XSSAPI.getValidHref in Apache Sling XSS version 2.4.10 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack in every feature using this metho...

CVE-2026-81998

The software Substance3D - Modeler is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could lead to arbitrary code execution within the context of the current user. Exploitation of this vulnerability requires user interaction , specifically where a victim must open a malicio...

CVE-2026-75745 Adobe Experience Manager Forms JEE | Incorrect Authorization (CWE-863)

Adobe Experience Manager Forms JEE is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user...

CVE-2026-82000

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918). A low-privileged attacker can exploit this flaw to achieve privilege escalation and gain elevated access to internal resources . The vulnerability requires no user interaction for explo...

CVE-2026-75744

Adobe Experience Manager Forms JEE is impacted by a stored Cross-Site Scripting (XSS) vulnerability. A high-privileged attacker can inject malicious scripts into vulnerable form fields, which execute in a victim's browser upon visiting the affected page. This could result in the attacker gaining ...

CVE-2026-75744 Adobe Experience Manager Forms JEE | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page...

CVE-2026-81995 Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue do...

CVE-2026-81995 Adobe Experience Manager Forms JEE | Improper Input Validation (CWE-20)

Adobe Experience Manager Forms JEE is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitation of this issue do...

CVE-2026-81999 Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery SSRF vulnerability that could result in privilege escalation. An attacker with high privileges could exploit this vulnerability to gain elevated access to internal resources. Exploitation of this issue does not requir...

CVE-2026-81999

Adobe Experience Manager Forms JEE is affected by a Server-Side Request Forgery (SSRF) vulnerability (CWE-918) that can lead to privilege escalation . An attacker with high privileges can exploit this issue to gain elevated access to internal resources. Exploitation does not require any user inte...

CVE-2026-75689 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

CVE-2026-75689

Adobe Connect is impacted by a stored Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this by injecting malicious scripts into vulnerable form fields . When a victim navigates to the page containing these fields, the malicious JavaScript may execute in their browser, potential...

CVE-2026-83964 Adobe Connect | Improper Certificate Validation (CWE-295)

Adobe Connect is affected by an Improper Certificate Validation vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue does not require user interaction...

CVE-2026-34689 Adobe Connect | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

CVE-2026-75682 Adobe Connect | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') (CWE-89)

Adobe Connect is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary SQL...

CVE-2026-48361

Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability (CWE-79). An attacker can abuse this flaw to inject malicious scripts into vulnerable form fields . When a victim browses to the page containing the affected field, the malicious JavaScript may be executed in their bro...

CVE-2026-48361 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope ...

CVE-2026-75684 Adobe Connect | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Connect is affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field,...

CVE-2026-75698 Adobe Connect | Cross-site Scripting (Reflected XSS) (CWE-79)

Adobe Connect is affected by a reflected Cross-Site Scripting XSS vulnerability. An attacker could exploit this vulnerability to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue requires user...